Privacy Policy

Our Promise

This data protection policy applies to We & Us Pte Ltd which are established in Singapore. The privacy of your Personal Data is important to us and we are committed to accord the information the due level of care in compliance with the Personal Data Protection Act of Singapore (the “Act”) and its regulation(s) (“PDPA”.) In this policy, “personal data” shall have the meaning ascribed to it in the PDPA.

Personal Data

Personal Data refers to the personal data, as defined under the Act, obtained by us in the course of and as a result of the provision of any products and services by us to you. Such Personal Data collected, used and disclosed to us may include, but not limited to, your name, company, mailing address, telephone number(s), personal email address, your images taken by us and any other information which you may have provided in any form to us.

Collection of Personal Data

Personal Data may be collected from you in several ways, such as, but not limited to:

  • when you subscribe to our mailing list to use our products and services;
  • when you enter into any service agreement or provide other documentation or information in respect of your interactions with us, or when you use our products and services;
  • when you subscribe to our outsourced payroll services and submit your employees’ Personal Data;
  • when you visit us in any of our premises or events hosted by us; and
  • when you ask us to provide a product or service over the telephone, face-to-face meeting, social media, our websites, official webpage or internet.

Where you have given your Personal Data through the aforementioned mediums or any other mode, you agree to be bound by this Personal Data Protection and Privacy Notice.

If you provide us with any Personal Data relating to a third party (e.g. information of your employees), by submitting such information to us, you represent to us that you have obtained the consent of the third party to provide us with their Personal Data in subscribing to our services.

For payroll services, all Personal Data submitted to us must be complete, accurate, true and correct. Failure on your part to do so may result in our inability to provide you with the services you have requested, or delays in processing or providing you with the payroll support services.

We assure you that regardless of the medium you provide your Personal Data to us, it will be handled by us with care and diligence not only in accordance with this Personal Data Protection and Privacy Notice, in compliance with the PDPA, but also in line with our commitment to you as our customers and/or service users.

Purpose for Collection

Generally, we collect Personal Data for our customers, prospective customers, suppliers etc. for purposes relating to the products and services we offer or require. These purposes include, but are not limited to:

  • strictly for the purposes of fulfilling its obligations and for contractual work and / or services required under our contract agreement;
  • responding to your request or enquiries regarding to an issue or question, and any other services we offer;
  • receiving feedback and dealing with complaints;
  • processing orders and administering accounts;
  • providing customer support, such as troubleshooting system issues or HR questions;
  • communicating with you in relation to products and services we provide which are relevant to your existing relationship with us;
  • offering you updated marketing and promotional packages you can benefit from, including products and services offered by our selected partners;
  • product updates and upgrades;
  • research and surveys; and
  • meeting regulatory and legal obligations.

We may for these purposes, contact you via mail (including electronic mail), telephone, SMS or other communication (text or image) applications for mobile devices, and facsimile.

Disclose

In providing you with a product or service, we may sometimes need to disclose your Personal Data to others. It is generally not our policy to disclose your Personal Data to external organisations unless we have your consent and/or are required to disclose your Personal Data as required in the normal course and scope of our business in the provision of our services to you, and/or for contractual, legal and regulatory requirements. Some examples of the types of external organisations we may need to disclose information to in the course of providing a product or service are:

  • appointed third party service partners; or
  • other companies or individuals, including legal counsel and information technology service providers, who assist us in providing services or who perform functions on our behalf (e.g., mailing houses of letters or printers for our marketing materials) who are contract bound to comply with our Data Protection and Privacy Notice and that of the PDPA.

Those external organisations are not authorised by us to use your Personal Data for anything other than the purpose(s) for which we supplied that information to them.

Unless otherwise required or permitted by law, we will only disclose your Personal Data with your consent (implied or expressed), and we will also take reasonable steps to ensure the external organisation to whom we have disclosed your information are also legally bound to protect the privacy of your Personal Data.

Withdrawal of Consent

Should you wish to withdraw your consent for us to send you sales and marketing information via a specific mode or all modes of communications (e.g., mail, email, telephone calls, SMS-Text), please notify us in writing to our Data Protection Officer (“DPO”). We may require up to 10 days, upon receipt of your request, for your request to take effect.

Access to and correction of Personal Data

If you wish to make (a) an access request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a correction request to correct or update any of your personal data which we hold about you, you may submit your request in writing or via email to our Data Protection Officer.

Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.

We will respond to your access request as soon as reasonably possible. Should we not be able to respond to your access request within 30 days after receiving your request, we will inform you in writing via email within 30 days of the time by which we will be able to respond to your request. If we are unable to provide you with any personal data requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).

We will respond to your correction request as soon as reasonably possible. Should we not be able to correct the correction request within 30 days after receiving your request, we will inform you in writing on the time by which we will be able to correct your correction request. If we are unable to make a correction requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the PDPA).

We will not provide information under the access requirement for:-

(a) opinion data kept solely for an evaluative purpose;

(b) the personal data of the beneficiaries of a private trust kept solely for the purpose of administering the trust;

(c) personal data kept by an arbitral institution or a mediation centre solely for the purposes of arbitration or mediation proceedings administered by the arbitral institution or mediation centre;

(d) documents related to a prosecution if all proceedings related to the prosecution have not been completed;

(e) personal data subject to legal privilege;

(f) personal data which, if disclosed, would reveal confidential commercial information that could, in the opinion of a reasonable person, harm the competitive position of the organisation;

(g) personal data collected, used or disclosed without consent pursuant to the exemptions in the PDPA, for the purposes of an investigation if the investigation and associated proceedings and appeals have not been completed;

(h) the personal data was collected or created by a mediator or arbitrator in the conduct of a mediation or arbitration for which he was appointed to act —

      • under a collective agreement under the Industrial Relations Act (Cap. 136) or by agreement between the parties to the mediation or arbitration;
      • under any written law; or
      • by a court, arbitral institution or mediation centre.

(i) any request:-

      • That would unreasonably interfere with the operations of the organisation because of the repetitious or systematic nature of the requests;
      • If the burden or expense of providing access would be unreasonable to the organisation or disproportionate to the individual’s interests;
      • For information that does not exist or cannot be found;
      • For information that is trivial; and
      • That is otherwise frivolous or vexatious.

(j) personal data or other information shall not be provided to an individual if the provision of that Personal Data or information could reasonably be expected to:

      • Threaten the safety or physical or mental health of an individual other than the individual who made the request;
      • Cause immediate or grave harm to the safety or to the physical or mental health of the individual who made the request;
      • Reveal Personal Data about another individual;
      • Reveal the identity of an individual who has provided Personal Data about another individual and the individual providing the Personal Data does not consent to the disclosure of his/her identity; or be contrary to national interest.

(k) If Personal Data has been disclosed to a prescribed law enforcement agency without the consent of the individual or pursuant to the exemptions in the PDPA, we shall not be required to inform the individual of such disclosure.

Correction request will not be approved in respect of:

(a) opinion data kept solely for an evaluative purpose;

(b) the personal data of the beneficiaries of a private trust kept solely for the purpose of administering the trust;

(c) personal data kept by an arbitral institution or a mediation centre solely for the purposes of arbitration or mediation proceedings administered by the arbitral institution or mediation centre; or

(d) a document related to a prosecution if all proceedings related to the prosecution have not been completed.

Accuracy of Personal Data

We will make a reasonable effort to ensure that personal data collected by us or on our behalf is accurate, complete and up-to-date whenever we collect or use it. This means that from time to time, we may ask you to update us if there is any change to your Personal Data.

Security and Protection of Personal Data

Security of Personal Data is very important to us and we will endeavour to take all reasonable steps to keep secure any information which we hold about you, and to keep this information accurate and up to date. Your information is stored on secured servers that are protected in controlled facilities. We require our employees and data processors to respect the confidentiality of any personal information held by us.

Retention

We will retain your Personal Data for a reasonable period for the purposes as cited herein or as required by law.

For our existing customers, you may refer to the service agreement and / or data protection policies which you have contracted with us.

Transfer of Personal Data outside of Singapore

We do not transfer your personal data to countries outside of Singapore. However, if we do so, we will obtain your consent for the transfer to be made and we will take steps to ensure that your personal data continues to receive a standard of protection that is at least comparable to that provided under the PDPA.

Privacy on Our Website

When you interact with us on our website, you consent to our use of cookies which will provide you with a more personalised experience. If you are concerned about cookies, you can choose to turn off all cookies. But, if you turn the cookies off, you won’t have access to many features and some of our services will not function properly. Should you wish to disable the cookies associated with these technologies, you may do so by changing the setting on your browser. However, you may not be able to enter certain part(s) of our website.

We also include third party links on our website for your convenience and information. These sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. We encourage you to review each website’s privacy policy before disclosing any data.

Resolving Concerns

If you believe that the privacy of your Personal Data has been compromised, please contact us immediately and we will take the relevant steps to address your concerns.

Right to amend our online Privacy Policy

We may from time to time update this Data Protection Policy to ensure that this Data Protection Policy is relevant in tandem with the changes in legal or regulatory requirements. Subject to your rights at law, you agree to be bound by the prevailing terms of this Data Protection Policy as updated from time to time on our website.

Data Protection Officer

For any questions relating to your Personal Data or about our Privacy Notice, you may contact our Data Protection Officer, Ms Rebecca Fung at rebecca@weandus.sg